This NotPetya Ransomware vaccination will stop the latest ransomware in its tracks

AnandK@TWC

1 year ago

A Kill Switch or Vaccination for the Petrwrap or NoPetya or NotPetya Ransomware has been found that can stop the ransomware in its tracks and save your computer from being infected. The NotPetya Ransomware has already created havoc in most parts of the world.

NotPetya uses the EternalBlue vulnerability (WannaCry technique) that infects computers using SMBv1. It also uses Windows WMIC and PSExec processes. If the WannaCry vulnerability is patched on your system, it uses PsExec or LSADUMP and the Windows Management Interface to spread.

The ransomware is capable of attacking and infecting all Windows systems. It overwrites the Master Boot Record and on reboot, infects the computer blocking access to it. Once it hacks your computer, it demands a ransom amount of $300 in Bitcoin.

If your computer reboots and you see this ‘false check disk’ message, power off immediately!

This is the NotPetya encryption process taking place. If you power off immediately or do not power on, your data will remain safe.

If the encryption process is allowed to continue, you will lose your data to theis ransomware!